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REMARKS 

A review of the claims indicates that: 

A) Claim 1 is currently amended. 

B) Claims 2, 3, 5—1 1 and 13 — ^29 remain in their original form. 

C) Claims 4 and 12 currently cancelled. 

In view of the following remarks. Applicant respectfully requests 
reconsideration of the rejected claims and withdrawal of the rejections. 
35 U.S.C. S102 Rejections 

Claims 1—5, 9 — 16, 20—22, 26, 28 and 29 were rejected under § 102(e) as 
being anticipated by U.S. Patent No. 20020013910, hereinafter "Edery." In 
response, the Applicant submits that the Office has failed to establish a prima faeie 
case of anticipation, and, in view of the comments below, respectfully traverses the 
Office's rejections. 

Claim 1 recites a processor-readable medium comprising processor- 
executable instructions for: 

• parsing an input file to recognize a file foraiat of the input file, 
wherein the parsing repeatedly parses with a plurality of 
componeiit parsers contained within an extensible parser, 
wherein the extensible parser is a compound parser and each of 
the plurality of component parsers is configured for recognition 
of a specific file format; 

• checking contents of the input file, according to the recognized file 
format, to determine whether executable code exists within the input 
file; 

• continuing to parse the input file with ail remaining component 
parsers after at least one component parser recognizes the file 
format of the input file; and 

• sending a status in response to results of said checking. 
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Claim 1 has been amended to recite the elements of Claims 4, 11 and 12, 
and therefore retains the scope of these combined claims. As amended, Claim 1 
recites in part, "parsing an input file to recognize a file format of the input file, 
wherein the parsing repeatedly parses with a plurality of component parsers 
contained within an extensible parser". 

The Applicant submits, inter alia, that Edery does not recognize a file's 
format using component parsers contained in an extensible parser. The Applicant 
ftirther submits that, at most, Edery discloses components 551, 552 that are 
configured to detect file content, not to recognize a file format. 

Referring to Fig. 5, [0086] and [0087] of the Edery reference, Edery 
discloses that a file type detector 503 determines whether a file is, or includes, an 
executable file type (see [0086] first 3 lines). Referring to Fig. 5, Edery does not 
disclose that detector 503 includes a plurality of component parsers within an ; 
extensible parser, as recited by Claim 1 . The detector is configured to analyze the 
file header (see [0086] next 7 lines). Edery discloses that the headers; of 
compressed files, such as zipped files, can also be examined, to determine if 
executable code and/or file types are included ([0086] next several lines). 
Additionally, the detector examines file delimiters such as ".exe" to determine if 
executable code is present. 

Accordingly, Edery discloses that the file type detector 503 detects files 
that have, or likely have, executable code ([0086], first several lines). However, 
Edery's file type detector 503 is not configured to repeatedly parse with a plurality 
of component parsers contained within an extensible parser . The use of 
component parsers to recognize a file format is not disclosed by Edery. 
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Referring to paragraph [0092] and Fig. 5 of the Edery reference, Edery 
discloses a content detector 505, configured to provide one or more content 
analyses, such as distinguishing binary data, pattern data and other data. For 
example, the content may be analyzed for binary information ([0092] at line 6) by 
binary detector 551. Additionally, the content may be analyzed for pattern 
detection by pattern detector 552 ([0092] at line 7). 

Thus, Edery discloses a content detector that includes plural elements. 
However, a disclosure of "content analysis" does not anticipate a recitation of "file 
format recognition" . Edery performs file format recognition at 503, thereby 
showing that "content analysis" is distinct from "file format recognition." The 
Applicant has recited, "parsing an input file to recognize a file format of the input 
file, wherein the parsing , the input file repeatedly parses with a plurality of 
component parsers contained within ah.extensible parser" (emphasis added). The. 
recitation by Claim 1 of components to recognize a file format is not anticipated 
by the Edery disclosure of a content. detector hawing, two or more component parts, 
That is, the Applicant recites, "recognizing a file format" while Edery discloses, 
"content detection". The Applicant respectfiiliy submits that, for at least this 
reason, that Edery does not fairly anticipate the Applicant's claim. 

Notwithstanding the above remarks, the Patent Office suggests that Edery 
discloses component parsers within an extensible parser (see Office Action mailed 
06/29/2007, page 3, rejection of Claim 4 (now incorporated by amendment into 
Claun 1)). In particular, the Patent Office points to Edery at [0086], [0087] and 
[0092] and suggests that Edery discloses component parsers contained within an 
extensible parser to recognize file format. The Applicant respectfully disagrees. 
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As noted above, Edery's content detector 505 includes components 551 and 
552. However, the content detector does not determine a data file format. Recall 
that a file format is a type of file, such as "jpeg", "PDF" and "doc". Each file 
format, such as the Microsoft Word "doc" format, has specific conventions 
regarding data storage. Instead, Edery specifically discloses that the detectors 551 
and 552 detect binary data and pattern data, respectively (see [0092]). Therefore, 
while Edery's detector 505 detects binary data and/or data patterns, it does not 
recognize file format . Instead, Edery recognizes file format at 503 (Fig. 5). 

Claim 1 has also been amended to recite the elements of Claims 11 and 12, 
and recites, "continuing! to parse the input file with all 'remaining component 
parsers after at least one component parser recognizes the file format of the input 
file". As discussed in the Examiner interview, the Edery reference does not show 
or disclose such continued parsing, as recited, wherein the parsing is based on 
recognizing file formats. 

In rejecting Claims 11 and 12 (now incorporated in Claim 1) the Patent 
Office pointed to Edery at paragraphs [0092] and [0093]. 

However, a review of Edery, generally and at these locations, does not 
reveal a disclosure of the use of an extensible and compound parser organized so 
that each component parser is associated with a particular file type (e.g. a DWG 
file type). Instead, Edery discloses the use of "binary" and "pattern" "detectors" 
wherein each detector is not associated with recognition of an individual file type . 
Accordingly, Edery does not disclose the compound parser as recited, having 
component parsers associated with individual file types. 
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Accordingly, the Applicant respectfully submits that the Edery reference 
does not fairly support a Section 102 rejection, and respectfiilly requests that the 
Section 102 rejection be removed. 

Claims 2, 3 and 5 — 13 depend from Claim 1 and are allowable due to their 
dependence from an allowable base claim. These claims are also allowable for 
their own recited features that, in combination with those recited in Claim 1, are 
not shown and not disclosed in references of record, either singly or in 
combination with one another. 

Claim 14 recites a method of detecting code-free files, comprising: 

• parsing an input file with a compound parser configured to include a 
plurality of component parsers, wherein each component parser is 
configured to recognize a specific data Hie format; 

• analyzing contents of the input file according to the recognized 
specific file format, where available, to determine if the input file 
contains executable codei ahd' 

• sending a status in response to regiult? of said analyzing. 

Claim 14 is in original and un-amended format. Claim 14 recites, "wherein 
each component parser is configured to recognize a specific data file format". The 
Applicant respectfully submits that the Edery reference does not disclose a 
component parser configured to recognize a specific data file format. 

The Apphcant notes that Edery discloses a file type detector 503 (see Fig. 5 
and [0086] wherein the file type detector is erroneously labeled "502"). The file 
type detector determines the "type" of the file, such as a ".exe" file. However, the 
file detector does not comprise "component parsers". The file type detector 503 is 
"monolithic" in structure, in that it does not include "components," as recited by 
Claim 14. Additional aspects of the file type detector 503 are discussed at [0087]. 
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However, no component parsers, each associated with a specific data file format 

are disclosed. 

The Patent Office points to Edery at [0086] and [0087]. The Applicant 
respectfully disagrees that [0086] and [0087] of Edery disclose the elements 
recited by Claim 14. 

Referring to Edery at these locations, a file type detector 503 is configured 
to detect file formats such as the ".exe" file format of an executable file. 
However, Edery' s file type detector 503 is not configured to include component 
parsers . The file type detector 503 appears to be monolithic in structure. Nothing 
in the text of [0086], [0087] or in Fig. 5 of Edery discloses, "each component 
parser is configured to recognize a specific data file format", as recited by Claim 
14. ■ 

Therefore, the Applicant respectfully submits that Edery does not disclose a 
compound parser configured recognize a specific data file format. Instead, Bdery 
discloses a file type detector 503 that is not compound in nature, and does not 
comprise component parsers configured to recognize a specific data file format. 
Accordingly, the Applicant respectfully requests that the Section 102 rejection be 
removed. 

Claims 15 — 20 depend from Claim 14 and are allowable due to their 
dependence fi-om an allowable base claim. These claims are also allowable for 
then: own recited features that, in combination with those recited in Claim 14, are 
not shown and not disclosed in references of record, either singly or in 
combination with one another. 
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Claim 21 recites an apparatus for detecting code-free files, comprising: 

• a compound parser configured to repeatedly parse an input file, 
wherein each component parser within the compound parser is 
configured to recognize executable code within a specific file format 
selected from among a group of data file formats; and 

• a controller to examine success of each of the component parsers 
to recognize the specific file format for which it was configured 
to recognize and to find executable code within the input file, 
wherein the controller is configured to send a status in response to 
results of said checking. 

Claim 21 is in original and un-amended format. The Applicant 
incorporates the remarks with respect to Claim 14, above, at this location by 
reference, and provides the below additional remarks. 

Claim 21 recites, "a controller to examine success of each of the component 
parsers to recognize the specific file format for which it was configured to 
recognize". The Applicant respectfully submits that the Edery reference does not 
disclose component parsers configured to recognize specific file formats. 

The Applicant notes that Edery discloses a file type detector 503 (see Fig. 5 
and [0086] wherein the file type detector is erroneously labeled "502"). The file 
type detector determines the "type" of the file, such as ".exe". However, the file 
detector does not comprise "component parsers". The file type detector 503 is 
"monolithic" in structure, in that it does not include "components," as recited by 
Claim 14. 

The Patent Office points to [0086] and [0087] of Edery's application. At 
these locations, Edery discloses a file type detector 503 configured to detect file 
formats such as the ".exe" file format of an executable file. However, Edery 's file 
type detector 503 is not configured to include component parsers. It appears to be 
monolithic in structure. Referring to Fig. 5, the structure of the file type detector 
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does not indicate any component parsers to recognize specific file formats, as 

disclosed. 

Therefore, the Apphcant respectfully submits that Edery does not disclose a 
compound parser configured recognize a specific data file format. Instead, Edery 
discloses a file type detector 503 that is not compound in nature, and does not 
comprise component parsers configured to recognize a specific data file format. 
Accordingly, the Applicant respectfully requests that the Section 102 rejection be 
removed. 

Claims 22 — ^29 depend from Claim 21 and are allowable due to their 
dependence from an allowable base claim. These claims are also allowable for 
theu: own recited features that, in combination with those recited in Claim 21, are 
not shown and not disclosed in references of record, either singly or in 
combination with one another. 

Claim 3 recites The processor-readable medium as recited in claim 1, . 
additionally comprising further instructions for sending a don*t-know statiis. 
when the file format of the input file was not recognized. 

Claim 3 recites, "sending a don't-know status when the file format of the 
input file was not recognized". The Applicant respectfully submits that Edery 
does not disclose a "don't know" status indicating that an input file format was not 

recognized. 

The Patent Office points to Edery at paragraph [0088], suggesting that a 
"don't know" status is sent when a format of an input file is not recognized. The 
Applicant respectfully disagrees. 
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Referring to Edery at [0088], the first two sentences (first 7 lines) discuss 
file inflation (i.e. decompressing a file). Referring to Fig. 5, the file inflator 504 is 
configured to de-compress a file. 

The third sentence, lines 7 — 1 1 of [0088], discuss that a compressed meta 
file may include nested file type information not otherwise reliably provided in an 
overall file header. In such circumstances, the file inflator 504 returns that 
information to the parser 502. 

In the fourth and final sentence in Edery's paragraph [0088], Edery 
discloses that the file inflator 504 also provides executable files to the control 
block 506, where they may be packaged with an MPC or policies. 

Therefore, the Applicant submits that a careful review of Edery's paragraph 
[0088] indicates no disclosure of "sending a don't-know status when the file 
format of the input file was not recognized". In fact, Edery does not. address 
failure to recognize a file format of an input file. Accordingly, Edery does not 
address sending a "don't know" status. 

In view of the above, the Applicant respectfiilly requests that the Section 
102 rejection be removed. 

Claims 16 and 22 are allowable for substantially the same reasons that 
Claim 3 is allowable, and the Applicant would like to incorporate the remarks with 
respect to Claim 3 in addressing the rejections of Claims 16 and 22. 

Claim 12 recites, the processor-readable medium as recited in claim 11, 
additionally comprising fiirther instructions for continuing to parse the input file 
with all remaining component parsers after at least one component parser 
recognizes the file format of the input. 
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Claim 12 recites, "continuing to parse the input file with all remaining 
component parsers after at least one component parser recognizes the file format 
of the input". The Applicant respectfully submits that Edery does not disclose a 
continuation of parsing after file recognition, and asks that the Section 102 
rejection be withdrawn. 

The Patent Office suggests that Edery discloses the recited elements at 
paragraph [0092]. The Applicant respectfully disagrees. 

Referring to Edery at paragraph [0092], Edery discloses content analysis 
([0092] at line 1) and not file format detection (Edery does that at 503). At [0092], 
lines 1 — 3, Edery discloses content analysis using the content detector 505. At; 
[0092], lines 4 — 9, Edery discloses that content analysis can include, binary 
detection (using detector 551) and/or pattern detection (using detector 552). , At 
lines 9— 14, Edery discloses analysis of the results of the content analysis. The 
balance, of paragraph [10092] discusses analysis of the results of the: content 
evaluation. 

The Applicant respectfully points out that Edery is not, in [0092], 
discussing recognition of file format, which is recited by Claim 12. Instead, Edery 
is discussing content analysis. Edery discloses recognition of file format at [0086] 
and [0087], where file type detector 503 is disclosed. Note that Edery calls the file 
type detector "502" in these paragraphs. However, even in [0086] and [0087], 
Edery does not disclose using all component parsers, even after one component 
has recognized the file. This partly true because Edery does not disclose 
continuing the effort after the file has been detected, and partly because Edery 
does not disclose component parsers adapted for file type recognition. 
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In view of these deficiencies in the Edery reference, the Applicant 
respectfully requests that the Section 102 rejection of Claim 12 be removed. 

Claim 29 recites, the apparatus as recited in claim 21, wherein the 
compound parser is configured to allow extension by addition of a new 
component parser to the compound parser, wherein the new component 
parser recognizes a further file format and recognizes executable code within 
the further file format. 

Claim 29 recites, "wherein the compound parser is configured to allow 
extension by addition of a new component parser to the compoimd parser, wherein 
the new component parser recognizes a further file format and recognizes 
executable code within the further file format". The Applicant respectfully 
submits that Edery does not disclose an extension to a compound parser, and asks 
that the Section 102 rejection be withdrawn. 

The Patent Office suggests tiiat Edery discloses the recited elements at 
paragraph [0093]. The Applicant respectfully disagrees. 

Referring to Edery at paragraph [0093], Edery discloses "parameters". In 
[0094], we see that the parameters can be "use" parameters or "executable" 
parameters. However, Edery does not disclose that the parameters allow 
recognition of a further file format and recognizes executable code within the 
further file format. In fact, the disclosure by Edery at [0093] does not appear to be 
analogous to the recited claim material. 

In view of these deficiencies in the Edery reference, the Applicant 
respectfully requests that the Section 102 rejection of Claim 29 be removed. 
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Conclusion 

The Applicant submits that all of the claims are in condition for allowance 
and respectfully requests that a Notice of Allowability be issued. If the Office's 
next anticipated action is not the issuance of a Notice of Allowability, the 
Applicant respectfully requests that the undersigned attorney be contacted for the 
purpose of scheduling an interview. 

Also, the Applicant would like to thank the Examiner for taking time to 
discuss the claims and prior art on 11 December 2007, and would very much 
welcome the opportunity to discuss the same and similar issues again, if needed, to 
resolve this application. 




Attorney for Applicant 

LEE & HAYES PLLC 
Suite 500 

421 W. Riverside Avenue 
Spokane, Washington 99201 

Telephone: 509-324-9256 x235 
Facsimile: (509) 323-8979 
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